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FINAL ACTION 

1 . This action is in response to amendment filed 6/30/201 0. Claims 1 , 5, 8-1 3, 1 7, 
20 and 21 are amended. Claims 1-21 are pending. 



Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

2. Claims 1-4, and 12-16 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Challener et al (US Patent Publication No. 2002/0059286 and 
Challener hereinafter) in view of Caronni et al. (US Patent No. 6,049,878 and Caronni 
hereinafter) further in view of Candelore (US Patent No. 6,363,149). 

3. As to clams 1 and 13, Challener teaches an apparatus for consolidating key 
updates generated for members of a group, wherein the key updates are provided in 
records that each comprise an encrypted key (e.g., user key) corresponding to a node 
of a key hierarchy and encrypted (i.e., wrapped) using a key (e.g., platform key) that 
corresponds to a descendant of that node (i.e., ...teaches user key 103 is a migratable 
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private 2048 RSA key wrapped by the platform key 102 and used as a root for all of a 
user's migratable keys [par. 21]), 

hierarchy-node information for both the encrypted and encrypting keys [fig. 1], 
the apparatus comprising a communications interface (e.g., bus) for receiving said 
records (912, fig. 9); 

Challener does not expressly teach: and key-version information for at least the 
encrypted key; and a manager for maintaining, on the basis of the received records, the 
manager being arranged to store in association with each tree node, for each encrypting 
key used in respect of the encrypted key associated with the node, the most up-to- date 
version of the encrypted key and its version information with any earlier versions being 
discarded. 

However at the time of applicant's original filing the feature of localizing key version 
information was well known and would have been an obvious modification of the 
teaching of Challener as disclosed by Caronni. Caronni discloses: key-version 
information for at least the encrypted key (to provide key- version information [col.. 9, 
lines 65-67; col. 10, lines 1-11]); 

and a manager for maintaining, on the basis of the received records (to provide a 
managing means for updating key data (e.g. record) [col. 10, lines 5-12]), the manager 
being arranged to store in association with each tree node (to provide storing capability 
of key data [col. 10, lines 1-10]), for each encrypting key used in respect of the 
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encrypted key associated with the node, the most up-to-date version (e.g., version 
information) of the encrypted key and its version information with any earlier versions 
being discarded (to provide means to provide the most up-to-date key information (e.g., 
key version data) [col. 10, lines 1-12]). 

Therefore, given Challener's key tree infrastructure, a person of ordinary skill in the art 
would have recognized the advantage of modifying Challener to provide a more robust 
re-keying means, with the well known feature of distributing and maintaining updated 
key information (e.g., key version) locally as disclosed by Caronni, thereby lowering the 
time it would normally take to re-key Challener's tree infrastructure. 

With regards to applicant's newly amended claim limitation element of a key history tree 
with nodes corresponding to nodes in said hierarchy, the Examiner contends that the 
system of Challener and Caronni, specifically Caronni provides key distribution between 
nodes within a hierarchy structure. See Caronni figure 4. However the system of 
Challener and Caronni do not expressly teach a key history tree. The Examiner notes 
that applicant explains that a key history tree is simply a cache (e.g., storage) that 
enables a previous key to be derived. See applicant's original specification paragraph 
42. The Examiner contends that prior art reference Candelore provides a method for 
obtaining previous key data from storage. See Candelore column 9, lines 35-60. 
Therefore to enhance the key management capability of Challener and Caronni, a 
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person with ordinary skill in the art would have modified the system of Challener and 
Caronni with Candelore's capability to obtain previous key data from storage. 

4. As to claims 2 and 14, Challener teaches an apparatus where the manager is 
arranged to store each said most up-to-date version (e.g., new migratable signing key) 
of a said encrypted key by storing the record containing the latter with any previously- 
stored record that is thereby superseded being discarded, [par. 25] 

5. As to claim 3, Challener teaches a apparatus where the manager is arranged to 
store in association with each tree node [par. 27], Challener does not expressly teach: 
along with the most up-to-date version of the corresponding encrypted key stored for 
each encrypting key used in respect of that encrypted key, version information for the 
encrypting key used to encrypt said most up-to-date version of the encrypted key, this 
version information being included in the record providing said most up-to-date version 
of the encrypted key. 

However at the time of applicant's original filing the feature of localizing key version 
information was well known and would have been an obvious modification of the 
teaching of Challener as disclosed by Caronni. 

Caronni discloses: along with the most up-to-date version (e.g., updated device 
information) of the corresponding encrypted key stored for each encrypting key used in 
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respect of that encrypted key .version information (e.g., updated device information) for 
the encrypting key used to encrypt said most up-to-date version (e.g., updated device 
information) of the encrypted key, this version information being included in the record 
providing said most up-to-date version of the encrypted key (to provide means to 
provide the most up-to-date key information (e.g., key version data) [col. 10, lines 1- 
12]). 



Therefore, given Challener's key tree infrastructure, a person of ordinary skill in the art 
would have recognized the advantage of modifying Challener to provide a more robust 
re-keying means, with the well known feature of distributing and maintaining updated 
key information (e.g., key version) locally as disclosed by Caronni, thereby lowering the 
time it would normally take to re-key Challener's tree infrastructure. 



6. As to clams 4 and 1 6, Challener teaches an apparatus where the manager is 
arranged to replace the version of the encrypted key stored in association with a tree 
node for a particular encrypting key (i.e., ...teaches updating the local key storage 
means [[par. 27), 



Challener does not expressly teach: with any subsequently received later version of that 
key provided the latter has been encrypted with a version of the encrypting key that is 
the same or later than the version used for encrypting the existing stored encrypted key. 
However at the time of applicant's original filing the feature of re-encryption utilizing new 
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key version information was well known and would have been an obvious modification 
of the teaching of Challener as disclosed by Caronni. Caronni discloses: with any 
subsequently received later version of that key provided the latter has been encrypted 
with a version of the encrypting key that is the same or later than the version used for 
encrypting the existing stored encrypted key.(to provide re-encrypting capability utilizing 
subsequent generated encrypting key data [col. 8, lines 1-20]. 

Therefore, given Challener's key storage means, a person of ordinary skill in the art 
would have recognized the advantage of modifying Challener with the well 
known feature of re-encryption utilizing subsequent key versions as disclosed by 
Caronni, thereby enhancing Challener's encryption capability. 

7. As to claims 8 and 20, Challener teaches an apparatus where the manager is 
arranged to maintain said key history tree only in respect of keys corresponding to the 
nodes of a predetermined sub-hierarchy of said hierarchy and keys for the path from the 
head of this sub-hierarchy that terminates at the root of the hierarchy [fig. 1]. 

With regards to applicant's claim limitation element of a manager arranged to 
maintained said key history tree, the Examiner contends that the system of Challener 
and Caronni, specifically Caronni provides key management (e.g., key manager) 
capability. See Caronni column 4, lines 50-60. However the system of Challener and 
Caronni do not expressly teach a key history tree. The Examiner notes that applicant 
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explains that a key history tree is simply a cache (e.g., storage) that enables a previous 
key to be derived. See applicant's original specification paragraph 42. The Examiner 
contends that prior art reference Candelore provides a method for obtaining previous 
key data from storage. See Candelore column 9, lines 35-60. 
Therefore to enhance the key management capability of Challener and Caronni, a 
person with ordinary skill in the art would have modified the system of Challener and 
Caronni with Candelore's capability to obtain previous key data from storage. 

8. As to clam 12, Challener teaches a system comprising: the apparatuses at each 
level of said hierarchical arrangement, other than said first level [fig. 1], each being 
arranged to maintain its said tree only in respect of keys corresponding to the nodes of 
a respective predetermined sub- hierarchy of said key hierarchy and keys for the path 
from the head of this sub- hierarchy that terminates at the root of the key hierarchy [fig. 
5]. 

Challener does not expressly teach: multiple apparatuses and a key-hierarchy manager 
for managing said key hierarchy in dependence on the addition and/or removal of 
members to a group and for outputting key update records reflecting changes made to 
the key hierarchy; the apparatuses being configured in a multiple-level hierarchical 
arrangement comprising a first-level apparatus arranged to receive the records output 
by the key-hierarchy manager, and one or more lower levels of apparatuses each 
arranged to receive the key tree, or a subset of it, produced by a said apparatus at the 
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next level up, the apparatuses at the lowest level of the hierarchical arrangement each 
being arranged to provide its key tree, or a subset of it, to a respective sub-group of 
members of said group; 

However at the time of applicant's original filing the feature of a key-hierarchy manager 
was well known and would have been an obvious modification of the teaching of 
Challener as disclosed by Caronni. Caronni discloses: multiple apparatuses and a key- 
hierarchy manager for managing said key hierarchy in dependence on the addition 
and/or removal of members to a group and for outputting key update records reflecting 
changes made to the key hierarchy (to provide the capability for group participant 
removal [col. 9, lines 10-25]); the apparatuses being configured in a multiple-level 
hierarchical arrangement comprising a first-level apparatus arranged to receive the 
records output by the key-hierarchy manager (to provide the capability to receive key 
update information (e.g., records) in a hierarchical key structure [fig. 4), and one or 
more lower levels of apparatuses each arranged to receive the key tree, or a subset of it 
(to provide a sub-tree (e.g. subset) arrangement [co;. 8, lines 40-50]), produced by a 
said apparatus at the next level up, the apparatuses at the lowest level of the 
hierarchical arrangement each being arranged to provide its key tree, or a subset of it, 
to a respective sub-group of members of said group (to provide a sub-tree (e.g. subset) 
arrangement [fig. 4]); 
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Therefore, given Challener's root key hierarchy, a person of ordinary skill in the art 
would have recognized the advantage of modifying Challener with the well known 
feature of key management as disclosed by Caronni, thereby enhancing Challener's 
root key hierarchy. 

With regards to applicant's newly amended claim limitation element of a key history tree 
associated to said hierarchy, the Examiner contends that the system of Challener and 
Caronni, specifically Caronni provides key distribution between nodes within a hierarchy 
structure. See Caronni figure 4. However the system of Challener and Caronni do not 
expressly teach a key history tree. The Examiner notes that applicant explains that a 
key history tree is simply a cache (e.g., storage) that enables a previous key to be 
derived. See applicant's original specification paragraph 42. The Examiner contends 
that prior art reference Candelore provides a method for obtaining previous key data 
from storage. See Candelore column 9, lines 35-60. Therefore to enhance the key 
management capability of Challener and Caronni, a person with ordinary skill in the art 
would have modified the system of Challener and Caronni with Candelore's capability to 
obtain previous key data from storage. 

9. As to clam 15, Challener teaches a method where in said sub-step the version 
information of the encrypting key used to encrypt said most up-to-date version of the 
encrypted key is stored with the latter [par. 27]. 
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10. Claims 5-7, 9-11, 17- 19 and 21 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Challener and Caronni in view of Candelore, as applied to claims 1 
and 13 above, and further in view of McDaniel et al. (US Patent Publication No. 
2003/0126464 and McDaniel hereinafter). 

11. As to claims 5-7, and 1 7-1 9, the combination of Challener and Caronni in view of 
Candelore provides key management and means to obtain previous key data (e.g., key 
history tree), however the combination do not disclose: An apparatus further comprising 
a working-set generator for processing the key history tree to generate a subset of the 
key history tree enabling, at least within a target failure rate, all clients associated with 
the key hierarchy to recover the current root key of the latter (claims 5 and 17). 

An apparatus where the working set generator comprises control means for 
receiving feedback on the current root-key recovery failure rate and for controlling the 
size of said subset to approach the actual failure rate to said target failure rate (claims 6 
and 18). An apparatus according where the working set generator further comprises 
means for determining the likelihood of a tree node being required to enable recovery 
the current root key, these means being based on at least one of the age of the node, or 
of an encrypted key associated with it, and an estimate of the number of possible clients 
that will need the node (claims 7 and 19). 

However at the time of applicant's original filing the feature target failure analysis 
within a group key management environment was well known and would have been an 



Application/Control Number: 10/814,608 Page 12 

Art Unit: 2431 

obvious modification of the combined teachings of Challener, Caronni in view of 
Candelore as disclosed by McDaniel. McDaniel discloses: 

An apparatus further comprising a working-set generator for processing the key 
history tree to generate a subset of the tree enabling, at least within a target failure rate, 
all clients associated with the key hierarchy to recover the current root key of the latter 
(to provide the capability for a new participant event (representing a newly admitted 
member) may require the initiation of session rekeying, such that the creation of new 
process monitoring timers (for failure detection and recovery) [par. 101]). (claims 5 and 
15) 

An apparatus where the working set generator comprises control means for 
receiving feedback on the current root-key recovery failure rate and for 
controlling the size of said subset to approach the actual failure rate to said target failure 
rate (to provide a mechanism feedback mechanism (e.g., detection) for failure analysis 
[par. 142]). (claims 6 and 18) 

An apparatus according where the working set generator further comprises 
means for determining the likelihood of a tree node being required to enable recovery 
the current root key, these means being based on at least one of the age of the node, or 
of an encrypted key associated with it, and an estimate of the number of possible clients 
that will 15 need the node (to provide failure detection to be supported through a timed 
heartbeat detection mechanism [par. 249]). (claims 7 and 19). 
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Therefore, given the key management capability of Challener, Caronni and 
Candelore, a person of ordinary skill in the art would have recognized the advantage of 
modifying Challener, Caronni and Candelore to provide a more robust key management 
means, with the well known feature of target failure analysis as disclosed by McDaniel, 
thereby enhancing the reliability of the re-key operation of Challener, Caronni and 
Candelore. 

12. As to claims 9 and 21 , the combination of Challener and Caronni in view of 
Candelore, specifically Caronni provides and a key-hierarchy manager for managing 
said key hierarchy in dependence on the addition and/or removal of members to the 
group, the key-hierarchy manager being arranged to output said records both to 
currently available members of said group and to said apparatus as notification of the 
changes made by the key-hierarchy manager to the key hierarchy, said apparatus being 
arranged to provide said key history tree, or a subset of it, however the system does not 
disclose. See Caronni paragraphs 59 & 66. Additionally the Examiner notes that 
applicant explains that a key history tree is simply a cache (e.g., storage) that enables a 
previous key to be derived. See applicant's original specification paragraph 42. The 
Examiner contends that prior art reference Candelore provides a method for obtaining 
previous key data from a storage (e.g., cache). See Candelore column 9, lines 35-60. 

However the system of Challener and Caronni in view of Candelore does not expressly 
teach: to members of said group who subsequently become available as a consolidated 
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notification of the changes made by the key-hierarchy manager to the key hierarchy 
whereby to enable these members to recover the current root key of the key hierarchy 
at least within a target failure margin. The Examiner contends at the time of applicant's 
original filing the feature target failure analysis within a group key management 
environment was well known and would have been an obvious modification of the 
combined teachings of Challener and Caronni in view of Candelore as disclosed by 
McDaniel. McDaniel discloses: to members of said group who subsequently become 
available as a consolidated notification of the changes made by the key-hierarchy 
manager to the key hierarchy whereby to enable these members to recover the current 
root key of the key hierarchy at least within a target failure margin (to provide the 
capability for a new participant event (representing a newly admitted member) may 
require the initiation of session rekeying, such that the creation of new process 
monitoring timers (for failure detection and recovery) [par. 101]). 

Therefore, given the key management capability of Challener and Caronni in view of 
Candelore,, a person of ordinary skill in the art would have recognized the advantage of 
modifying Challener and Caronni in view of Candelore to provide a more robust key 
management means, with the well known feature of target failure analysis as disclosed 
by McDaniel thereby enhancing the reliability of the re-key operation of Challener and 
Caronni in view of Candelore. 
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1 3. As to claim 1 0, the combination of Challener and Caronni in view of Candelore, 
specifically Caronni provides a system comprising apparatus and a key-hierarchy 
manager for managing said key hierarchy in dependence on the addition and/or 
removal of members to the group, the key-hierarchy manager being arranged to output 
said records to said apparatus, said apparatus being arranged to provide said key 
history tree, or a subset of it. See Caronni paragraph 45, 59 & 68. Additionally the 
Examiner notes that applicant explains that a key history tree is simply a cache (e.g., 
storage) that enables a previous key to be derived. See applicant's original specification 
paragraph 42. The Examiner contends that prior art reference Candelore provides a 
method for obtaining previous key data from a storage (e.g., cache). See Candelore 
column 9, lines 35-60. 

However the system of Challener and Caronni in view of Candelore does not expressly 
teach to members of said group who subsequently become available as a consolidated 
notification of the changes made by the key-hierarchy manager to the key hierarchy 
whereby to enable these members to recover the current root key of the key hierarchy 
at least within a target failure margin. The Examiner contends at the time of applicant's 
original filing the feature target failure analysis within a group key management 
environment was well known and would have been an obvious modification of the 
combined teaching of Challener and Caronni in view of Candelore as disclosed by 
McDaniel. McDaniel discloses: to members of said group who subsequently become 
available as a consolidated notification of the changes made by the key-hierarchy 
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manager to the key hierarchy whereby to enable these members to recover the current 
root key of the key hierarchy at least within a target failure margin (to provide the 
capability for a new participant event (representing a newly admitted member) may 
require the initiation of session rekeying, such that the creation of new process 
monitoring timers (for failure detection and recovery) [par. 101]). 

Therefore, given the key management capability of Challener and Caronni in view of 
Candelore, a person of ordinary skill in the art would have recognized the advantage of 
modifying Challener and Caronni in view of Candelore to provide a more robust key 
management means, with the well known feature of target failure analysis as disclosed 
by McDaniel thereby enhancing the reliability of the re-key operation of Challener and 
Caronni in view of Candelore. 

14. As to claim 1 1 , although Challener discloses features of applicant's claimed 
invention, Challenger does not disclose: 

A system where the key-hierarchy manager and said apparatus form part of an 
anonymous group content distribution arrangement; the key history tree, or a subset of 
it, being sent to group members in association with content encrypted with a key that is 
one of: the key-hierarchy root key, and - a key encrypted using the key-hierarchy root 
key and provided in encrypted form along with the encrypted content, (claim 11) 



Application/Control Number: 10/814,608 Page 17 

Art Unit: 2431 

However at the time of applicant's original filing these features were well known 
and would have been an obvious modification of the teachings of Challener as 
disclosed by Caronni. Caronni discloses: 

A system where the key-hierarchy manager and said apparatus form part of an 
anonymous group content distribution arrangement; the key tree, or a subset of it (to 
provide sub-tree (e.g., sub-set) generation capability [fig. 3]), being sent (e.g., 
transmission) to group members in association with content encrypted with a key that is 
one of: the key-hierarchy root key (to provide transmission of updated key data to 
associated group participants [col. 10, lines 20-35]), and a key encrypted using the key- 
hierarchy root key and provided in encrypted form along with the encrypted content (to 
provide encrypted content and encrypted data [col. 10, lines 20-35]). (claim 1 1 ) 

Therefore, given Challener's key tree infrastructure, a person of ordinary skill in 
the art would have recognized the advantage of modifying Challener with the well 
known feature of key management as disclosed by Caronni thereby enhancing the key 
data distribution within Challener's key tree infrastructure. 

With regards to applicant's newly amended claim limitation element of a key history tree 
with nodes corresponding to nodes in said hierarchy, the Examiner contends that the 
system of Challener and Caronni, specifically Caronni provides key distribution between 
nodes within a hierarchy structure. See Caronni figure 4. However the system of 
Challener and Caronni do not expressly teach a key history tree. The Examiner notes 
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that applicant explains that a key history tree is simply a cache (e.g., storage) that 
enables a previous key to be derived. See applicant's original specification paragraph 
42. The Examiner contends that prior art reference Candelore provides a method for 
obtaining previous key data from storage. See Candelore column 9, lines 35-60. 
Therefore to enhance the key management capability of Challener and Caronni, a 
person with ordinary skill in the art would have modified the system of Challener and 
Caronni with Candelore's capability to obtain previous key data from storage. 

Response to Arguments 
Examiner Remarks -35 U.S.C. 101 

The Examiner withdraws the rejection made 35 U.S.C. 101 for claims 13-21 in 
view of applicant's claim amendments. 

Examiner Remarks -35 U.S.C. 103 

Applicant's arguments with respect to claims 1-21 have been considered but are 
moot in view of the new ground(s) of rejection. The Examiner respectfully submits 
applicant's arguments presented on 6/20/2010 are directed towards applicant's newly 
amend claim limitation element of "key history tree". The Examiner notes that applicant 
explains that a "key history tree" is simply a cache (e.g., storage) that enables a 
previous key to be derived. See applicant's original specification paragraph 42. The 
Examiner contends that prior art reference Candelore provides a method for obtaining 
(e.g., deriving) previous key data from a storage. See Candelore column 9, lines 35-60. 
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Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Contact Information 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to BRYAN WRIGHT whose telephone number is (571)270- 
3826. The examiner can normally be reached on 8:30 am - 5:30 pm Monday -Friday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, William Korzuch can be reached on (571) 272-7589. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/BRYAN WRIGHT/ 
Examiner, Art Unit 2431 

/Kaveh Abrishamkar/ 

Primary Examiner, Art Unit 2431 



